$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer File: A659218A22E64B9AA4A437C941E20690CB9F5BFC.cer (raw, json) Hash identifier: TVqHtOeWNexy3dwdTZR/QHK6JLisNP02Df4CBMGl2C4= Subject key identifier: A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B Certificate issuer: /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Certificate serial: 7A2FEF432AE73BAFD4DAE10FFE972FA7186387F8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Manifest: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.mft caRepository: rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/ Notify URL: https://rpki-repo.registro.br/rrdp/notification.xml Certificate not before: Tue 02 Sep 2025 13:22:22 +0000 Certificate not after: Tue 01 Sep 2026 13:27:22 +0000 Subordinate resources: AS: 264047 IP: 143.137.220.0/22 IP: 2804:29f4::/32 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 19 Sep 2025 07:12:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2f:ef:43:2a:e7:3b:af:d4:da:e1:0f:fe:97:2f:a7:18:63:87:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B Validity Not Before: Sep 2 13:22:22 2025 GMT Not After : Sep 1 13:27:22 2026 GMT Subject: CN=A659218A22E64B9AA4A437C941E20690CB9F5BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:39:56:93:8b:51:a6:fb:04:85:88:98:d5:b2: 79:66:ac:16:7c:02:3b:57:3b:d5:a2:27:31:d4:78: 0d:22:1f:1c:c6:ef:8a:87:3e:23:57:1a:2e:25:45: 24:50:43:8c:17:1b:e9:8f:39:e2:05:ec:ea:d8:1a: f9:8e:3d:39:a5:43:8f:8b:4b:66:a9:98:61:ae:22: f2:8a:26:3e:48:54:62:08:e8:d6:10:08:0a:2b:fe: c7:f9:16:4c:86:1b:2a:d6:b5:48:54:9b:8b:68:b4: 7a:f7:0c:00:62:f9:ee:08:c3:57:fb:b4:d4:d5:32: 90:49:31:7c:27:98:0e:e7:6a:a8:dc:43:23:91:3f: 80:09:6f:a2:d9:52:b8:c6:d1:99:1c:c8:0b:9b:fd: 9d:ca:be:88:b1:39:5c:1d:36:ff:f1:fa:a9:0a:d0: 0d:a8:26:93:df:01:e3:a0:f1:d9:b3:1e:ad:59:52: 76:e9:62:46:e7:e4:0e:6f:ee:60:ec:42:d0:57:9a: 1f:57:69:77:c6:c5:cd:9a:1e:33:b8:4f:c6:21:83: fd:73:c5:a0:fb:7e:ea:3f:d5:62:f5:47:fc:c5:c8: af:95:3d:b7:dd:68:b1:c4:bc:c4:2b:55:17:b2:13: 87:f4:79:3a:74:45:38:9a:f2:eb:e3:d0:3c:5e:6d: 7a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:59:21:8A:22:E6:4B:9A:A4:A4:37:C9:41:E2:06:90:CB:9F:5B:FC X509v3 Authority Key Identifier: keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer Subject Information Access: CA Repository - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1 RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/8wEjAwUf9KPnX4ERy1BXEBUsecd3uY3jH5B2Cq3WxVoe/1/A659218A22E64B9AA4A437C941E20690CB9F5BFC.mft RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.220.0/22 IPv6: 2804:29f4::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264047 Signature Algorithm: sha256WithRSAEncryption 99:75:04:ca:44:9b:82:48:ee:eb:09:1f:f7:fb:64:cc:95:a6: 52:f9:04:c1:ac:88:4d:94:3a:1b:c9:29:97:b9:6d:52:aa:b3: 6c:7b:05:c7:ab:3b:4b:1f:85:17:4e:e1:92:1a:4c:f0:89:f7: 4d:ab:8c:94:11:dc:e3:30:3a:6c:0c:b6:00:5f:b5:ac:af:84: 81:50:d2:52:2f:6c:8d:65:e9:29:15:a2:34:b4:2a:7c:cf:04: 9f:8c:37:f7:6d:a3:e4:35:cb:cd:f4:46:eb:bd:27:bc:95:90: 4c:ce:57:6f:f1:62:21:d7:31:fe:55:c6:ad:67:0c:05:14:5f: ee:a6:3b:36:38:e1:cd:43:88:5f:44:05:e3:4d:b4:9d:05:d0: 06:f3:cf:0b:b5:1c:24:c8:a6:19:9b:2a:eb:65:84:93:de:6f: 7b:a2:87:0f:66:fc:99:db:11:b4:0f:9d:85:97:31:aa:f1:b8: 41:04:93:b5:e0:66:7d:09:fc:14:86:7c:d6:f8:d4:e5:99:38: 4b:24:5b:da:7a:db:72:48:3f:aa:6c:b8:3e:f2:40:5c:0a:83: ff:a6:e7:29:ef:29:e1:0b:34:11:61:4a:67:63:96:d3:fd:6a: 97:35:3a:a4:15:5f:24:50:4f:97:7a:7a:40:8f:b7:88:cc:ce: 65:87:88:bd -----BEGIN CERTIFICATE----- MIIGLzCCBRegAwIBAgIUei/vQyrnO6/U2uEP/pcvpxhjh/gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA1NDMyRTlFMUIwNUE3RTZDMjA4QjI5NDZGREM5Qzk2 N0NBOEE0QjAeFw0yNTA5MDIxMzIyMjJaFw0yNjA5MDExMzI3MjJaMDMxMTAvBgNV BAMTKEE2NTkyMThBMjJFNjRCOUFBNEE0MzdDOTQxRTIwNjkwQ0I5RjVCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OVaTi1Gm+wSFiJjVsnlmrBZ8 AjtXO9WiJzHUeA0iHxzG74qHPiNXGi4lRSRQQ4wXG+mPOeIF7OrYGvmOPTmlQ4+L S2apmGGuIvKKJj5IVGII6NYQCAor/sf5FkyGGyrWtUhUm4totHr3DABi+e4Iw1f7 tNTVMpBJMXwnmA7naqjcQyORP4AJb6LZUrjG0ZkcyAub/Z3KvoixOVwdNv/x+qkK 0A2oJpPfAeOg8dmzHq1ZUnbpYkbn5A5v7mDsQtBXmh9XaXfGxc2aHjO4T8Yhg/1z xaD7fuo/1WL1R/zFyK+VPbfdaLHEvMQrVReyE4f0eTp0RTia8uvj0DxebXpDAgMB AAGjggM5MIIDNTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmWSGKIuZLmqSk N8lB4gaQy59b/DAfBgNVHSMEGDAWgBRgVDLp4bBafmwgiylG/cnJZ8qKSzAOBgNV HQ8BAf8EBAMCAQYwbQYDVR0fBGYwZDBioGCgXoZccnN5bmM6Ly9ycGtpLXJlcG8u cmVnaXN0cm8uYnIvcmVwby9uaWNicl9yZXBvLzEvNjA1NDMyRTlFMUIwNUE3RTZD MjA4QjI5NDZGREM5Qzk2N0NBOEE0Qi5jcmwwgbkGCCsGAQUFBwEBBIGsMIGpMIGm BggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kv bGFjbmljL0ExNTMxQjI0QkY1MEM0NjFDN0Y1NzRDRDY1MjY3QThCMERDMzI1REFB QTEwMDc1RjY3MTY1Qjk4QzRGNEVGQzMvMC82MDU0MzJFOUUxQjA1QTdFNkMyMDhC Mjk0NkZEQzlDOTY3Q0E4QTRCLmNlcjCCAT8GCCsGAQUFBwELBIIBMTCCAS0wXQYI KwYBBQUHMAWGUXJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdF akF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hWb2UvMTCBigYI KwYBBQUHMAqGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJyL3JlcG8vOHdF akF3VWY5S1BuWDRFUnkxQlhFQlVzZWNkM3VZM2pINUIyQ3EzV3hWb2UvMS9BNjU5 MjE4QTIyRTY0QjlBQTRBNDM3Qzk0MUUyMDY5MENCOUY1QkZDLm1mdDA/BggrBgEF BQcwDYYzaHR0cHM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcnJkcC9ub3RpZmlj YXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcB Af8EHzAdMAwEAgABMAYDBAKPidwwDQQCAAIwBwMFACgEKfQwGgYIKwYBBQUHAQgB Af8ECzAJoAcwBQIDBAdvMA0GCSqGSIb3DQEBCwUAA4IBAQCZdQTKRJuCSO7rCR/3 +2TMlaZS+QTBrIhNlDobySmXuW1SqrNsewXHqztLH4UXTuGSGkzwifdNq4yUEdzj MDpsDLYAX7Wsr4SBUNJSL2yNZekpFaI0tCp8zwSfjDf3baPkNcvN9EbrvSe8lZBM zldv8WIh1zH+VcatZwwFFF/upjs2OOHNQ4hfRAXjTbSdBdAG888LtRwkyKYZmyrr ZYST3m97oocPZvyZ2xG0D52FlzGq8bhBBJO14GZ9CfwUhnzW+NTlmThLJFvaetty SD+qbLg+8kBcCoP/pucp7ynhCzQRYUpnY5bT/WqXNTqkFV8kUE+XenpAj7eIzM5l h4i9 -----END CERTIFICATE-----Generated at Thu Sep 18 07:26:17 2025 by rpki-client